Privacy Policy
How your data is processed when you contact us.
Data controller
The data controller is QDNA. Contact: [email protected].
Data collected and purpose
The contact form collects your first and last name, your company, your professional email address, your phone number, and the nature of your requirement. The purpose is to process your commercial request and arrange an appointment.
Legal basis
Processing is based on your consent, collected via a dedicated checkbox on the form.
Recipients
The recipients are QDNA's teams. Your data is neither resold nor passed to third parties for commercial purposes. It does, however, transit through two processors established in the United States: Cloudflare, Inc. for hosting and request routing, and Resend, Inc. for delivering the notification email. This transfer outside the European Union rests, for Cloudflare, on the European Commission's standard contractual clauses and on that provider's certification under the EU-U.S. Data Privacy Framework; for Resend, on the standard contractual clauses annexed to its data processing addendum, that provider storing data in the United States. These mechanisms were verified at their sources on 1 September 2026. You may request the details at the address below.
Retention period
Data is kept for as long as necessary to process your request and follow up with you. You can request its deletion at any time, under the right to erasure provided by the GDPR, by simply emailing [email protected]. Deletion takes place as soon as possible after the request is received.
Your rights
You have a right of access, rectification, erasure, objection, and portability. You can exercise these rights by writing to [email protected]. You may also lodge a complaint with the French data protection authority (CNIL).
Cookies and audience measurement
This site sets no cookies, on any page, and uses neither advertising trackers nor profiling. Traffic is measured through Cloudflare Web Analytics, a cookieless solution that assigns no identifier allowing a visitor to be followed from one site to another.
Nothing is read from or written to your device. We checked this on the actual rendering on 5 September 2026: once the beacon has loaded, Cloudflare leaves no cookie, no local storage entry and no session storage entry. Article 82 of the French Data Protection Act covers only the reading of information already stored in terminal equipment, or the writing of information into it, so it does not apply to this measurement. Your prior consent is therefore not required, and we no longer impose a banner on you.
Legal basis. Legitimate interest, under Article 6(1)(f) GDPR: knowing how our pages are visited so we can maintain and improve them. That interest stays proportionate to your rights, since the tool writes nothing to your device, does not follow you from one site to another, and we derive only per-page totals from it.
What is measured. According to Cloudflare's documentation, the beacon reads, through your browser's Performance API: country, host name, page path, referring page, device type, browser, operating system, navigation type, and load times. We derive only per-page totals from it. Cloudflare states that it does not collect visitors' personal data for this service.
Recipient and location. The recipient is Cloudflare, Inc., a company established in the United States, acting as a processor. Unlike contact form data, which does not leave the European Union, the measurement request goes to Cloudflare's global network. The transfer to the United States relies on the European Commission's standard contractual clauses and on Cloudflare's certification under the EU-US Data Privacy Framework. We run no other measurement tool and cross-reference these totals with no other processing.
Retention. We keep no traffic data of our own: we consult the totals Cloudflare aggregates, whose retention period is set by that publisher and documented on its site.
Objecting, at any time. Article 21 GDPR lets you object to processing based on legitimate interest. Write to [email protected] and we stop counting you. A content blocker installed in your browser also prevents the beacon from loading.
Security
Form exchanges are encrypted in transit. The internal notification is sent to a dedicated mailbox, not exposed on the client side.